Requiring a business to destroy or arrange for the destruction of a customer's records that contain specified personal information of the customer in a specified manner; requiring a business that owns or licenses specified personal information of an individual residing in the State to implement and maintain specified security procedures and practices; requiring businesses that own, license, or maintain specified records to notify specified persons of a breach of the security of a system; etc.